Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
File:                     fQL6LFuiiSBF581Qpa39VNbbuMI.mft (raw, json)
Hash identifier:          vkg9H4ogub0T0m+jtBtSNb/AXHf2tqxV/brtePE4HEw=
Subject key identifier:   8E:89:8C:D3:F3:6B:5D:15:32:B5:29:52:06:F8:B3:DF:62:0F:60:B3
Authority key identifier: 7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
Certificate issuer:       /CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Certificate serial:       01962F743859B71AE9D0603A665A4D189704
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
Manifest number:          13C8
Signing time:             Sun 13 Apr 2025 14:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:07 +0000
Files and hashes:         1: D0FtQbvZQzXxktB27DUgaEKlwyA.roa (hash: TJTUE8/n7jdIuoCoqw/ggE/DDwa5ne0vVYVe1eoGnag=)
                          2: RNOXkvXJ_ycI8OmwcuHSmaLAtH4.roa (hash: LUqOAenIf0vYCqR2aBBDyfZ5SWi7hY4GyrNgtlhdeZw=)
                          3: fQL6LFuiiSBF581Qpa39VNbbuMI.crl (hash: gLZgEAcq7Dk/sS8o2j1w1ZuzYTHQ7TKP01pIemcvi80=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:38:59:b7:1a:e9:d0:60:3a:66:5a:4d:18:97:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
        Validity
            Not Before: Apr 13 14:01:07 2025 GMT
            Not After : Apr 14 14:01:07 2025 GMT
        Subject: CN=8e898cd3f36b5d1532b5295206f8b3df620f60b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:28:01:cc:f3:42:57:45:03:3f:03:6c:15:47:
                    8d:30:66:89:85:7c:15:c6:eb:db:e1:0a:60:ac:06:
                    e2:85:43:73:6e:22:33:f3:bf:66:3f:45:ca:e2:35:
                    42:2b:d7:88:ed:ee:54:cf:3a:2c:8e:dd:a9:8b:71:
                    08:b7:57:63:77:45:6f:9d:c4:7d:9a:4c:e0:30:39:
                    14:b5:1d:83:1e:f0:79:74:05:39:55:77:52:a7:6e:
                    ac:e8:2d:45:93:eb:a0:fa:a5:48:f8:1f:b5:e2:45:
                    ba:db:c4:85:39:0e:00:a9:16:a7:38:28:61:85:22:
                    50:69:1b:c8:a8:49:16:71:69:73:77:5d:65:16:d8:
                    92:4e:2f:75:0d:91:6e:e7:3c:a1:67:ed:71:78:11:
                    1a:b7:ff:54:2d:55:3a:b5:70:b8:0e:46:4b:94:85:
                    6b:b6:6f:ff:5e:b6:32:94:0f:60:f2:cc:a3:05:4c:
                    60:56:c8:7e:68:48:2f:d8:82:45:39:07:64:e7:dc:
                    d2:f3:a4:c6:93:a8:f7:54:e7:11:8a:a1:68:32:bf:
                    22:5b:19:31:89:09:01:3a:4e:7c:19:d0:da:a9:28:
                    f2:4e:f5:68:05:15:8d:2a:6f:68:31:c2:18:69:71:
                    7b:b3:96:cf:7e:2e:48:cd:c5:33:3f:ad:6d:10:3b:
                    97:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:89:8C:D3:F3:6B:5D:15:32:B5:29:52:06:F8:B3:DF:62:0F:60:B3
            X509v3 Authority Key Identifier:
                keyid:7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:11:1b:29:2e:41:52:a2:0e:03:37:1c:68:00:14:05:0a:61:
         df:b2:c6:17:b0:91:23:81:bd:f5:42:06:81:c0:fb:4b:c3:78:
         4c:c0:8a:b5:55:8d:df:6f:21:cd:ba:2c:0d:b4:1e:5e:af:90:
         4d:a3:a9:7e:6c:a8:d2:2e:6b:57:2b:66:68:8d:b3:dc:55:e6:
         1b:f6:ca:91:c2:9b:46:dd:e5:12:34:fb:5b:a6:d5:8e:d1:ec:
         71:01:23:74:d6:d4:ef:81:41:43:de:2b:85:99:d5:44:40:c0:
         f6:43:84:69:40:86:67:d5:14:30:25:6e:75:91:c5:4e:ea:db:
         1e:14:90:82:4b:92:24:b2:58:50:74:a4:fd:29:6f:f2:56:5d:
         3a:8b:cf:68:3b:93:9a:7c:e9:4f:35:e7:4e:12:d4:b2:20:6f:
         f1:35:4a:27:21:e5:23:96:f4:00:8d:bd:b6:b7:80:79:d1:9e:
         b0:f0:ea:d3:3e:9d:b4:48:cf:bd:48:a1:33:51:f6:8b:c3:c0:
         46:6f:41:7c:68:67:92:f3:b9:0e:41:be:24:05:6c:77:b4:e7:
         d2:5e:dc:b1:b2:15:93:0f:65:12:60:7c:ca:22:29:91:a9:3d:
         3c:33:72:79:d2:88:8d:7e:b3:c4:00:0a:3d:a3:75:e7:6f:4f:
         b2:9c:87:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----